Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/XK_LM1I6Jaa88eemICAxVSFP8rY.roa
File: XK_LM1I6Jaa88eemICAxVSFP8rY.roa (raw, json)
Hash identifier: AfjX0tolaVLN/yMwVDJ4wmlKSmWrWNqM0ESfru1Q5yg=
Subject key identifier: 5C:AF:CB:33:52:3A:25:A6:BC:F1:E7:A6:20:20:31:55:21:4F:F2:B6
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A0B518E782E6FA59CEA474E48A057D04DB
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/XK_LM1I6Jaa88eemICAxVSFP8rY.roa
Signing time: Fri 18 Sep 2026 15:18:23 +0000
ROA not before: Fri 18 Sep 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 83.245.42.0/24 maxlen: 24
83.245.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:18:e7:82:e6:fa:59:ce:a4:74:e4:8a:05:7d:04:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 18 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cafcb33523a25a6bcf1e7a620203155214ff2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:c8:f2:7f:8a:56:f4:39:27:dc:3d:39:b2:
1b:69:8a:65:21:69:b4:a5:30:4f:75:39:5a:d7:dd:
da:a0:34:49:15:fd:99:ed:2f:06:1b:f4:de:fd:4b:
d0:5f:4d:df:24:03:34:9b:14:5b:6e:ab:66:eb:c3:
7e:45:d2:41:ce:8f:c8:16:2b:a5:ac:a0:23:86:94:
36:06:f8:0b:6d:39:58:74:d9:a2:8a:ef:6e:0c:90:
7a:ce:70:c6:3e:ff:98:9d:40:66:cd:c7:77:30:90:
60:0d:17:18:26:21:58:d4:bd:99:35:6b:a6:ea:cf:
e5:fb:25:59:6c:4c:84:d5:e8:5e:0e:08:f6:a4:07:
a7:c3:76:42:15:e6:aa:de:79:0d:b2:de:ae:30:59:
f1:7a:8c:5f:1a:94:f6:fb:0c:04:e7:17:da:cb:3b:
19:cf:5f:b7:c9:1f:85:49:ef:9d:29:8a:b3:f3:a5:
89:3c:67:75:44:dc:bc:d0:4f:ca:32:4f:14:50:3d:
2b:c1:af:18:95:4b:e2:ce:49:27:1a:eb:07:45:46:
78:56:47:af:60:0d:5e:62:ff:92:17:22:d6:70:7d:
ab:ea:b0:5e:cd:d9:0c:c8:92:72:be:40:9f:c5:bd:
29:bc:71:dc:92:a5:d0:59:46:f2:70:0c:4e:73:38:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AF:CB:33:52:3A:25:A6:BC:F1:E7:A6:20:20:31:55:21:4F:F2:B6
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/XK_LM1I6Jaa88eemICAxVSFP8rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.42.0/24
83.245.47.0/24
Signature Algorithm: sha256WithRSAEncryption
43:69:4c:fd:a9:79:b5:b0:95:b2:4c:89:e1:ba:16:ef:65:84:
f9:06:fd:49:73:11:e6:c7:71:9d:06:dc:97:63:5d:4b:a1:0a:
8b:89:33:a4:8b:33:32:e9:6d:44:74:cc:40:12:f6:69:2a:84:
83:6d:1f:fa:3e:b6:64:e4:6e:b7:bc:80:4e:2a:f8:e7:39:f3:
9b:a8:5e:36:48:be:87:b9:3a:fe:11:07:b6:9a:13:e7:ec:72:
5e:01:95:c4:65:8e:2b:e1:73:a0:3d:78:f5:b6:44:fc:dc:a6:
5a:40:bb:98:10:58:d7:10:ba:cf:f9:33:51:e9:b1:78:3c:a9:
bd:da:09:12:b0:16:cd:08:14:b1:b8:fc:cf:44:7e:5d:74:15:
79:33:0d:36:e5:60:41:2c:a6:18:d2:dd:e7:de:22:1e:70:28:
60:7d:26:36:d7:cb:38:c2:00:6f:ce:2a:7d:d5:a9:5c:cb:9a:
e1:40:94:ca:70:1b:62:47:a8:53:01:47:00:95:32:54:53:12:
6e:7b:aa:96:d8:1a:74:78:1a:2e:17:4b:da:f2:7e:0a:d6:39:
be:43:9a:f6:a5:86:00:33:1c:31:bf:cb:18:1a:15:97:9a:2f:
f5:71:4b:0d:14:b1:36:93:d4:01:c4:dc:3d:ff:dc:e8:f4:e6:
2a:0b:d7:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaC1GOeC5vpZzqR05IoFfQTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwOTE4MTUxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2FmY2IzMzUyM2EyNWE2YmNmMWU3YTYyMDIwMzE1NTIxNGZmMmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC3I8n+KVvQ5J9w9ObIbaYplIWm0
pTBPdTla193aoDRJFf2Z7S8GG/Te/UvQX03fJAM0mxRbbqtm68N+RdJBzo/IFiul
rKAjhpQ2BvgLbTlYdNmiiu9uDJB6znDGPv+YnUBmzcd3MJBgDRcYJiFY1L2ZNWum
6s/l+yVZbEyE1eheDgj2pAenw3ZCFeaq3nkNst6uMFnxeoxfGpT2+wwE5xfayzsZ
z1+3yR+FSe+dKYqz86WJPGd1RNy80E/KMk8UUD0rwa8YlUvizkknGusHRUZ4Vkev
YA1eYv+SFyLWcH2r6rBezdkMyJJyvkCfxb0pvHHckqXQWUbycAxOczhwgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFyvyzNSOiWmvPHnpiAgMVUhT/K2MB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvWEtfTE0xSTZKYWE4OGVlbUlDQXhWU0ZQOHJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU/UqAwQA
U/UvMA0GCSqGSIb3DQEBCwUAA4IBAQBDaUz9qXm1sJWyTInhuhbvZYT5Bv1JcxHm
x3GdBtyXY11LoQqLiTOkizMy6W1EdMxAEvZpKoSDbR/6PrZk5G63vIBOKvjnOfOb
qF42SL6HuTr+EQe2mhPn7HJeAZXEZY4r4XOgPXj1tkT83KZaQLuYEFjXELrP+TNR
6bF4PKm92gkSsBbNCBSxuPzPRH5ddBV5Mw025WBBLKYY0t3n3iIecChgfSY218s4
wgBvzip91alcy5rhQJTKcBtiR6hTAUcAlTJUUxJue6qW2Bp0eBouF0va8n4K1jm+
Q5r2pYYAMxwxv8sYGhWXmi/1cUsNFLE2k9QBxNw9/9zo9OYqC9ch
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:43 2026 by rpki-client